CVE-2012-2982
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as…
published September 11, 2012
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.2th percentile for exploit probability.
What it is
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) character.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.62181 · 99.2th percentile
- Published
- 2012-09-11T18:00Z
EPSS history
Timeline